Integrating Cisco Secure Endpoint

Barracuda XDR can monitor your Cisco Secure Endpoint data by using the Cisco Secure Endpoint API. To integrate the monitoring of your environment, please follow the below configuration procedure. For information on the API please see the reference guide: https://ciscosecurity-amp-00-integration-workflows.readthedocs-hosted.com/en/latest/amp/intro.html#integration-requirements 

1. Log in to the Cisco Security portal as an administrator. 

2. Click Accounts > API Credentials. 

3. In the API Credentials pane, click New API Credential. 

4. In Application name, type SKOUT SIEM, then select Read & Write.

5. Click Create. 

6. From the API Key Details section, copy the values for the 3rd Party API Client ID and the API Key.

7. Test your credentials to make API calls by inputting it into the dashboard and clicking Test.

1. In Barracuda XDR Dashboard, navigate to Administration >  Integrations.

2. On the Cisco Secure Endpoint card, click Setup.
   

3. Do the following:

   • Select Enabled.

   • Type the Client ID.

   • Paste the API Key.

     Open

     

4. Click Test.

5. When the test passes, click Save